EUVD-2025-29004

Malicious code in bioql PyPI...

EUVD-2022-4262

Malicious code in bioql PyPI...

EUVD-2024-50964

Malicious code in bioql PyPI...

EUVD-2024-19861

Malicious code in bioql PyPI...

EUVD-2024-50762

Malicious code in bioql PyPI...

EUVD-2024-46875

Malicious code in bioql PyPI...

EUVD-2024-29248

Malicious code in bioql PyPI...

EUVD-2025-31692

Malicious code in bioql PyPI...

EUVD-2025-29693

Malicious code in bioql PyPI...

EUVD-2022-15578

Malicious code in bioql PyPI...

EUVD-2024-49407

Malicious code in bioql PyPI...

EUVD-2024-45094

Malicious code in bioql PyPI...

EUVD-2024-49049

Malicious code in bioql PyPI...

EUVD-2024-36531

Malicious code in bioql PyPI...

CVE-2025-9212

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

PT-2025-40497

Name of the Vulnerable Software and Affected Versions AP Background plugin for WordPress versions 3.8.1 through 3.8.2 Description The AP Background plugin for WordPress is susceptible to arbitrary file uploads because of missing authorization and inadequate file validation within the...

CVE-2025-10647 Embed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload

The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxhandlerdownloadpdfmedia function in all versions up to, and including, 1.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and...

CVE-2025-10647 Embed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload

The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxhandlerdownloadpdfmedia function in all versions up to, and including, 1.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and...

CVE-2025-9216

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import function in all versions up to, and including, 1.5.0. This makes it possible for...

CVE-2025-9216

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import function in all versions up to, and including, 1.5.0. This makes it possible for...